[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.514936] kasan: CONFIG_KASAN_INLINE enabled [ 27.519798] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 27.527153] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 27.533359] Modules linked in: [ 27.536529] CPU: 0 PID: 7971 Comm: syz-executor413 Not tainted 4.14.296-syzkaller #0 [ 27.544383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 27.553716] task: ffff888096882080 task.stack: ffff8880b3098000 [ 27.559757] RIP: 0010:vhost_chr_write_iter+0x873/0x1100 [ 27.565092] RSP: 0018:ffff8880b309fc00 EFLAGS: 00010246 [ 27.570425] RAX: dffffc0000000000 RBX: ffff888091400140 RCX: 0000000000000000 [ 27.577671] RDX: 0000000000000002 RSI: ffffffff8ba5d350 RDI: ffff888091400200 [ 27.584932] RBP: ffffed1012280039 R08: 0000000000000000 R09: 0000000000000000 [ 27.592174] R10: 0000000000000002 R11: ffff888096882080 R12: 0000000000000002 [ 27.599416] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff11016613f87 [ 27.606664] FS: 0000555556edf300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 27.614864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.620736] CR2: 000000002000004e CR3: 00000000a3045000 CR4: 00000000003406f0 [ 27.627982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.635224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.642467] Call Trace: [ 27.645033] ? log_write_hva+0x310/0x310 [ 27.649070] ? debug_check_no_obj_freed+0x2c0/0x680 [ 27.654060] ? lock_downgrade+0x740/0x740 [ 27.658180] ? iov_iter_init+0xa6/0x1c0 [ 27.662127] __vfs_write+0x44c/0x630 [ 27.665816] ? kernel_read+0x110/0x110 [ 27.669680] ? rw_verify_area+0xe1/0x2a0 [ 27.673716] vfs_write+0x17f/0x4d0 [ 27.677230] SyS_write+0xf2/0x210 [ 27.680661] ? SyS_read+0x210/0x210 [ 27.684262] ? __do_page_fault+0x159/0xad0 [ 27.688471] ? do_syscall_64+0x4c/0x640 [ 27.692419] ? SyS_read+0x210/0x210 [ 27.696018] do_syscall_64+0x1d5/0x640 [ 27.699880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 27.705043] RIP: 0033:0x7f902f609029 [ 27.708728] RSP: 002b:00007ffee3c223c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 27.716409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f902f609029 [ 27.723657] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 0000000000000003 [ 27.730899] RBP: 00007f902f5cd010 R08: 0000000000000000 R09: 0000000000000000 [ 27.738141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f902f5cd0a0 [ 27.745382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 27.752627] Code: ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c6 06 00 00 4c 8b ab c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e9 48 c1 e9 03 <80> 3c 01 00 0f 85 8f 06 00 00 49 8b 6d 00 48 85 ed 0f 84 e4 03 [ 27.771693] RIP: vhost_chr_write_iter+0x873/0x1100 RSP: ffff8880b309fc00 [ 27.780538] ---[ end trace d8d78b334e0a7ffc ]--- [ 27.785307] Kernel panic - not syncing: Fatal exception [ 27.790838] Kernel Offset: disabled [ 27.794451] Rebooting in 86400 seconds..